)]}'
{"ansible/roles/glance/defaults/main.yml":[{"author":{"_account_id":14826,"name":"Mark Goddard","email":"markgoddard86@gmail.com","username":"mgoddard"},"change_message_id":"0aa50985a4b5197d9aaf2e8aaef9f71fd07eb109","unresolved":true,"context_lines":[{"line_number":9,"context_line":"    enabled: true"},{"line_number":10,"context_line":"    image: \"{{ glance_api_image_full }}\""},{"line_number":11,"context_line":"    environment: \"{{ glance_api_container_proxy }}\""},{"line_number":12,"context_line":"    privileged: \"{{ enable_cinder | bool }}\""},{"line_number":13,"context_line":"    volumes: \"{{ glance_api_default_volumes + glance_api_extra_volumes }}\""},{"line_number":14,"context_line":"    dimensions: \"{{ glance_api_dimensions }}\""},{"line_number":15,"context_line":"    healthcheck: \"{{ glance_api_healthcheck }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fea455c9_fa3509b8","line":12,"range":{"start_line":12,"start_character":20,"end_line":12,"end_character":40},"updated":"2021-07-08 09:14:49.000000000","message":"This really ought to have a glance_backend_cinder flag (ideally disabled by default), rather than always making glance privileged when cinder is enabled. The most common backends I\u0027m aware of are file and ceph - I haven\u0027t heard of cinder being used much.","commit_id":"3db9ee2e3296e850b7165c06a1fa9bf99d1c97dc"},{"author":{"_account_id":14826,"name":"Mark Goddard","email":"markgoddard86@gmail.com","username":"mgoddard"},"change_message_id":"f39b33e03ecdbdd19dc063575f9e6229a30ac683","unresolved":true,"context_lines":[{"line_number":9,"context_line":"    enabled: true"},{"line_number":10,"context_line":"    image: \"{{ glance_api_image_full }}\""},{"line_number":11,"context_line":"    environment: \"{{ glance_api_container_proxy }}\""},{"line_number":12,"context_line":"    privileged: \"{{ enable_cinder | bool }}\""},{"line_number":13,"context_line":"    volumes: \"{{ glance_api_default_volumes + glance_api_extra_volumes }}\""},{"line_number":14,"context_line":"    dimensions: \"{{ glance_api_dimensions }}\""},{"line_number":15,"context_line":"    healthcheck: \"{{ glance_api_healthcheck }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"57eb1659_3a2d8964","line":12,"range":{"start_line":12,"start_character":20,"end_line":12,"end_character":40},"in_reply_to":"3029e5b8_b8fc9647","updated":"2021-08-18 11:25:05.000000000","message":"Indeed, that is what I want to avoid. Cinder iscsi backend is probably less commonly used in production.","commit_id":"3db9ee2e3296e850b7165c06a1fa9bf99d1c97dc"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"8ef09d9063a496aa41e6b1395f21a3a8475db282","unresolved":true,"context_lines":[{"line_number":9,"context_line":"    enabled: true"},{"line_number":10,"context_line":"    image: \"{{ glance_api_image_full }}\""},{"line_number":11,"context_line":"    environment: \"{{ glance_api_container_proxy }}\""},{"line_number":12,"context_line":"    privileged: \"{{ enable_cinder | bool }}\""},{"line_number":13,"context_line":"    volumes: \"{{ glance_api_default_volumes + glance_api_extra_volumes }}\""},{"line_number":14,"context_line":"    dimensions: \"{{ glance_api_dimensions }}\""},{"line_number":15,"context_line":"    healthcheck: \"{{ glance_api_healthcheck }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7d7d5eb4_24de9e12","line":12,"range":{"start_line":12,"start_character":20,"end_line":12,"end_character":40},"in_reply_to":"57eb1659_3a2d8964","updated":"2021-08-18 12:25:00.000000000","message":"Agreed, blocking this for now.","commit_id":"3db9ee2e3296e850b7165c06a1fa9bf99d1c97dc"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"49cb1b480e96885e7d485cedd2c5657cbb53678c","unresolved":true,"context_lines":[{"line_number":9,"context_line":"    enabled: true"},{"line_number":10,"context_line":"    image: \"{{ glance_api_image_full }}\""},{"line_number":11,"context_line":"    environment: \"{{ glance_api_container_proxy }}\""},{"line_number":12,"context_line":"    privileged: \"{{ enable_cinder | bool }}\""},{"line_number":13,"context_line":"    volumes: \"{{ glance_api_default_volumes + glance_api_extra_volumes }}\""},{"line_number":14,"context_line":"    dimensions: \"{{ glance_api_dimensions }}\""},{"line_number":15,"context_line":"    healthcheck: \"{{ glance_api_healthcheck }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3029e5b8_b8fc9647","line":12,"range":{"start_line":12,"start_character":20,"end_line":12,"end_character":40},"in_reply_to":"9b65cdab_1694b9db","updated":"2021-08-11 11:59:49.000000000","message":"Khe, khe. I am super proactive and I have actually worked on this before: https://review.opendev.org/c/openstack/kolla-ansible/+/714999","commit_id":"3db9ee2e3296e850b7165c06a1fa9bf99d1c97dc"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"d543dbeb03dea3632d6c880ed1325fded8733b31","unresolved":true,"context_lines":[{"line_number":9,"context_line":"    enabled: true"},{"line_number":10,"context_line":"    image: \"{{ glance_api_image_full }}\""},{"line_number":11,"context_line":"    environment: \"{{ glance_api_container_proxy }}\""},{"line_number":12,"context_line":"    privileged: \"{{ enable_cinder | bool }}\""},{"line_number":13,"context_line":"    volumes: \"{{ glance_api_default_volumes + glance_api_extra_volumes }}\""},{"line_number":14,"context_line":"    dimensions: \"{{ glance_api_dimensions }}\""},{"line_number":15,"context_line":"    healthcheck: \"{{ glance_api_healthcheck }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9b65cdab_1694b9db","line":12,"range":{"start_line":12,"start_character":20,"end_line":12,"end_character":40},"in_reply_to":"fea455c9_fa3509b8","updated":"2021-08-11 09:32:50.000000000","message":"TBH, we should really avoid making all these services privileged and instead find the missing caps. 😄 I know you want to avoid a situation when one has Cinder enabled without iSCSI and suddenly will get another privileged service for no reason. Though bear in mind users with iSCSI had it already like this. 😞","commit_id":"3db9ee2e3296e850b7165c06a1fa9bf99d1c97dc"}]}